Protect yourself against future threats.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2022.4080
Local Privilege Escalation in Auto Updater for Zoom Client
for Meetings for macOS
17 August 2022
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: Zoom Client for Meetings for macOS
Publisher: Zoom
Operating System: macOS
Resolution: Patch/Upgrade
CVE Names: CVE-2022-28756
Original Bulletin:
https://explore.zoom.us/en/trust/security/security-bulletin/?filter-cve=&filter=&keywords=ZSB-22018+
Comment: CVSS (Max): 8.8 CVE-2022-28756 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
CVSS Source: Zoom
Calculator: https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
- --------------------------BEGIN INCLUDED TEXT--------------------
ZSB-22018 - Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS
Published: 08/13/2022
CVE: CVE-2022-28756
Severity : High
CVSS Score : 8.8
CVSS Vector String : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Description : The Zoom Client for Meetings for macOS (Standard and for IT
Admin) starting with version 5.7.3 and before 5.11.5 contains a vulnerability
in the auto update process. A local low-privileged user could exploit this
vulnerability to escalate their privileges to root.
Users can help keep themselves secure by applying current updates or
downloading the latest Zoom software with all current security updates from
https://zoom.us/download.
Affected Products :
o Zoom Client for Meetings for macOS (Standard and for IT Admin) starting
version 5.7.3 and before version 5.11.5
Source : Reported by Patrick Wardle of Objective-See
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
https://www.auscert.org.au/bulletins/
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: https://auscert.org.au/gpg-key/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=eSnN
-----END PGP SIGNATURE-----